Level/ Type |
Code |
Display Name |
Code System |
0‑S |
SecurityPolicy
|
security policy
|
Act Code |
1‑S |
ObligationPolicy
|
obligation policy
|
Act Code |
2‑L |
ANONY
|
anonymize
|
Act Code |
2‑L |
AOD
|
accounting of disclosure
|
Act Code |
2‑L |
AUDIT
|
audit
|
Act Code |
2‑L |
AUDTR
|
audit trail
|
Act Code |
2‑L |
CPLYCC
|
comply with confidentiality code
|
Act Code |
2‑L |
CPLYCD
|
comply with consent directive
|
Act Code |
2‑L |
CPLYJPP
|
comply with jurisdictional privacy policy
|
Act Code |
2‑L |
CPLYOPP
|
comply with organizational privacy policy
|
Act Code |
2‑L |
CPLYOSP
|
comply with organizational security policy
|
Act Code |
2‑L |
CPLYPOL
|
comply with policy
|
Act Code |
2‑L |
DECLASSIFYLABEL
|
declassify security label
|
Act Code |
2‑L |
DEID
|
deidentify
|
Act Code |
2‑L |
DELAU
|
delete after use
|
Act Code |
2‑L |
DOWNGRDLABEL
|
downgrade security label
|
Act Code |
2‑L |
DRIVLABEL
|
derive security label
|
Act Code |
2‑S |
ENCRYPT
|
encrypt
|
Act Code |
3‑L |
ENCRYPTR
|
encrypt at rest
|
Act Code |
3‑L |
ENCRYPTT
|
encrypt in transit
|
Act Code |
3‑L |
ENCRYPTU
|
encrypt in use
|
Act Code |
2‑L |
HUAPRV
|
human approval
|
Act Code |
2‑L |
LABEL
|
assign security label
|
Act Code |
2‑L |
MASK
|
mask
|
Act Code |
2‑L |
MINEC
|
minimum necessary
|
Act Code |
2‑L |
PERSISTLABEL
|
persist security label
|
Act Code |
2‑L |
PRIVMARK
|
privacy mark
|
Act Code |
2‑L |
PSEUD
|
pseudonymize
|
Act Code |
2‑L |
REDACT
|
redact
|
Act Code |
2‑L |
UPGRDLABEL
|
upgrade security label
|
Act Code |
1‑S |
RefrainPolicy
|
refrain policy
|
Act Code |
2‑L |
NOAUTH
|
no disclosure without subject authorization
|
Act Code |
2‑L |
NOCOLLECT
|
no collection
|
Act Code |
2‑L |
NODSCLCD
|
no disclosure without consent directive
|
Act Code |
2‑L |
NODSCLCDS
|
no disclosure without information subject's consent directive
|
Act Code |
2‑L |
NOINTEGRATE
|
no integration
|
Act Code |
2‑L |
NOLIST
|
no unlisted entity disclosure
|
Act Code |
2‑L |
NOMOU
|
no disclosure without MOU
|
Act Code |
2‑L |
NOORGPOL
|
no disclosure without organizational authorization
|
Act Code |
2‑L |
NOPAT
|
no disclosure to patient, family or caregivers without attending provider's authorization
|
Act Code |
2‑L |
NOPERSISTP
|
no collection beyond purpose of use
|
Act Code |
2‑L |
NORDSCLCD
|
no redisclosure without consent directive
|
Act Code |
2‑L |
NORDSCLCDS
|
no redisclosure without information subject's consent directive
|
Act Code |
2‑L |
NORDSCLW
|
no disclosure without jurisdictional authorization
|
Act Code |
2‑L |
NORELINK
|
no relinking
|
Act Code |
2‑L |
NOREUSE
|
no reuse beyond purpose of use
|
Act Code |
2‑L |
NOVIP
|
no unauthorized VIP disclosure
|
Act Code |
2‑L |
ORCON
|
no disclosure without originator authorization
|
Act Code |
|
|